]> git.ipfire.org Git - thirdparty/krb5.git/commit
Use EVP key agreement in PKINIT 1228/head
authorGreg Hudson <ghudson@mit.edu>
Thu, 28 Oct 2021 04:00:20 +0000 (00:00 -0400)
committerGreg Hudson <ghudson@mit.edu>
Fri, 5 Nov 2021 21:35:49 +0000 (17:35 -0400)
commite42ab224a33b2a6e764045f0f9bfc8a679ab5fa1
treea4ea9b321e29875e419b63c1e84cbc1f121aac03
parent4936bdc7b9ead67e28eae4cf268fd55d3e424ae4
Use EVP key agreement in PKINIT

In pkinit_crypto_openssl.c, use EVP_PKEY objects and interfaces to
perform DH operations to the extent possible in OpenSSL 1.0 and 1.1.
Define helper functions for DH operations to make it easier to
conditionalize on OpenSSL version.
src/plugins/preauth/pkinit/pkinit_crypto_openssl.c
src/plugins/preauth/pkinit/pkinit_crypto_openssl.h